News for hackers. Stuff that matters.

A comment on If you’re not using SSH certificates you’re doing SSH wrong (2019). Parent comment

Re:If you’re not using SSH certificates you’re doing SSH wro... by pritambaral on Friday March 25, 2022 @04:46AM (#30799850)
Rookie mistake: SSH's KRL is also a CRL. See KEY REVOCATION LISTS in ssh-keygen(1). You can revoke plain keys with it, but also revoke certs (both by serial number and identity) with it.

The infrastructure I built for access control using SSH certs used it. I know it works because I tested for it specifically.

[ Parent | on HN ]

There are no comments on this comment yet.